SharpLAPS - Retrieve LAPS Password From LDAP
The attribute ms-mcs-AdmPwd stores the clear-text LAPS password.
This executable is made to be executed within Cobalt Strike session using execute-assembly. It will retrieve the LAPS password from the Active Directory.
Require (either):
- Account with
ExtendedRightorGeneric All Rights - Domain Admin privilege
LDAP host to target, most likely the DC Optional /user:<username> Username of the account /pass:<password> Password of the account /out:<file> Outputting credentials to file /ssl Enable SSL (LDAPS://) Usage: SharpLAPS.exe /user:DOMAIN\User /pass:[email protected]! /host:192.168.1.1 ">
_____ __ __ ___ ____ _____ / ___// /_ ____ __________ / / / | / __ \/ ___/ \__ \/ __ \/ __ `/ ___/ __ \/ / / /| | / /_/ /\__ \ ___/ / / / / /_/ / / / /_/ / /___/ ___ |/ ____/___/ //____/_/ /_/\__,_/_/ / .___/_____/_/ |_/_/ /____/ /_/Required/host:<1.1.1.1> LDAP host to target, most likely the DCOptional/user:<username> Username of the account/pass:<password> Password of the account/out:<file> Outputting credentials to file/ssl Enable SSL (LDAPS://)Usage: SharpLAPS.exe /user:DOMAIN\User /pass:[email protected]! /host:192.168.1.1Via: feedproxy.google.com
SharpLAPS - Retrieve LAPS Password From LDAP
Reviewed by Anónimo
on
8:40
Rating:
Reviewed by Anónimo
on
8:40
Rating:
